CVE-2026-60860

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Service Delivery Platform (Messaging Enabler) version 14.1.2.0.0 Oracle Fusion Middleware Service Delivery Platform (Messaging Enabler) version 12.2.1.4.0

Description An unauthenticated attacker with network access via TCP can compromise the Service Delivery Platform. This issue allows for the unauthorized creation, deletion, or modification of critical data and all data accessible by the platform. Additionally, a successful attack can lead to a complete Denial of Service (DOS) by causing the system to hang or crash repeatedly. While the flaw resides in the Service Delivery Platform, the impact may extend to other integrated products.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.